Container Escape Vulnerability in IBM Aspera Enterprise WebApps
CVE-2026-75777

8.8HIGH

Key Information:

Vendor

IBM
Status
Aspera Enterprise Webapps
Vendor
CVE Published:
10 September 2026

What is CVE-2026-75777?

A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allows local attackers to bypass container security measures. This issue arises due to unrestricted system calls being permitted within the container, which could potentially enable an attacker to execute arbitrary commands outside of the container environment, compromising the host system's integrity.

Affected Version(s)

Aspera Enterprise WebApps 1.0.0 <= 1.0.5

References

https://www.ibm.com/support/pages/node/7286738
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.